Security audit
karakeep-note-capture
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward helper instruction for saving selected notes to a specific Karakeep instance, with clear warnings not to store secrets.
Install this only in the intended OpenClaw environment with the referenced Karakeep helper and token. Treat anything saved as durable and searchable, and do not use it for passwords, API keys, private keys, recovery codes, or private third-party messages unless explicitly appropriate.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.